[2.5, RBAC, API] Resource pool admins can't update machine details
Bug #1811699 reported by
Björn Tillenius
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
MAAS |
Fix Released
|
High
|
Björn Tillenius |
Bug Description
This is with MAAS 2.5.1-7489-
If I'm authenticated as a user that has the Admin role on a resource pool,
the update command for a machine still can't be used:
lilium:~> maas user4 machine update 6q33ak hostname=my-name
This method is reserved for admin users.
In fact, it seems that a lot of the methods under machine is
only accessible to global admins, so we'll have to go through
each one of them and fix them.
The ones that are confirmed affected are:
machine update
machine power-parameters
There are also some methods under the 'machines' endpoint that have the
same problem. The bug to track that is bug 1813181.
Related branches
~bjornt/maas:backport-bug-1811699
- Björn Tillenius: Approve
-
Diff: 206 lines (+90/-11)4 files modifiedsrc/maasserver/api/machines.py (+0/-1)
src/maasserver/api/nodes.py (+2/-2)
src/maasserver/api/tests/test_machine.py (+50/-2)
src/maasserver/api/tests/test_node.py (+38/-6)
~bjornt/maas:api-non-full-admin-apis
Merged
into
maas:master
- Lee Trager (community): Approve
- MAAS Lander: Approve
-
Diff: 206 lines (+90/-11)4 files modifiedsrc/maasserver/api/machines.py (+0/-1)
src/maasserver/api/nodes.py (+2/-2)
src/maasserver/api/tests/test_machine.py (+50/-2)
src/maasserver/api/tests/test_node.py (+38/-6)
tags: | added: rbac |
Changed in maas: | |
status: | New → Triaged |
importance: | Undecided → High |
milestone: | none → 2.5.1 |
description: | updated |
tags: | added: api |
description: | updated |
description: | updated |
description: | updated |
description: | updated |
Changed in maas: | |
status: | Triaged → In Progress |
assignee: | nobody → Björn Tillenius (bjornt) |
description: | updated |
description: | updated |
Changed in maas: | |
status: | In Progress → Fix Committed |
Changed in maas: | |
status: | Fix Committed → Fix Released |
To post a comment you must log in.